SARA / Free Tools / CVE / CVE-2024-6047

CVE-2024-6047 — GeoVision Devices OS Command Injection Vulnerability

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

CVSS

9.8 CRITICAL

EPSS

72.97% (top 1.20%)

CWE

CWE-78

Published

2024-06-17T05:48:42.779Z

Last modified

2025-10-21T22:56:21.904Z

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA KEV — Actively Exploited

Added to KEV

2025-05-07

BOD 22-01 due

2025-05-28

Ransomware use

Unknown

View KEV detail

CVE-2024-6047 on CISA KEV →

01What is this vulnerability?

02Affected products

Vendor	Product	Versions
GeoVision	GV_DSP_LPR_V2	all
GeoVision	GV_IPCAMD_GV_BX1500	all
GeoVision	GV_IPCAMD_GV_CB220	all
GeoVision	GV_IPCAMD_GV_EBL1100	all
GeoVision	GV_IPCAMD_GV_EFD1100	all
GeoVision	GV_IPCAMD_GV_FD2410	all
GeoVision	GV_IPCAMD_GV_FD3400	all
GeoVision	GV_IPCAMD_GV_FE3401	all
GeoVision	GV_IPCAMD_GV_FE420	all
GeoVision	GV	VS14_VS14 — all
GeoVision	GV_VS03	all
GeoVision	GV_VS2410	all
GeoVision	GV_VS28XX	all
GeoVision	GV_VS216XX	all
GeoVision	GV VS04A	all
GeoVision	GV VS04H	all
GeoVision	GVLX 4 V2	all
GeoVision	GVLX 4 V3	all
GeoVision	GV_IPCAMD_GV_BX130	all
GeoVision	GV_GM8186_VS14	all

03Active exploitation status

Yes — actively exploited. Added to the CISA KEV catalog on 2025-05-07. Ransomware use: Unknown.

04Recommended remediation

Patch to a fixed version listed in the vendor advisory (see references below).
Mitigate with WAF rules, network egress filters, or feature flags where the patch is not yet available.
Hunt historical logs for exploitation indicators — see Detection signatures below.

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection in your stack of choice:

Open in Sigma generator →

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

Published: 2024-06-17T05:48:42.779Z
Last modified: 2025-10-21T22:56:21.904Z
Added to CISA KEV: 2025-05-07
BOD 22-01 due: 2025-05-28

09References

www.twcert.org.tw — https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html
www.twcert.org.tw — https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.

Read the API reference →

EPSS detail → Search KEV → Ask SARA →